Docker API exposed from Mac Docker Desktop w TLS

gistfile1.txt

export FILENAME=server
openssl genrsa -out $FILENAME.key 2048
openssl req -new -key $FILENAME.key -x509 -days 3653 -out $FILENAME.crt
cat $FILENAME.key $FILENAME.crt >$FILENAME.pem
chmod 600 $FILENAME.key $FILENAME.pem
export FILENAME=client
openssl genrsa -out $FILENAME.key 2048
openssl req -new -key $FILENAME.key -x509 -days 3653 -out $FILENAME.crt
cat $FILENAME.key $FILENAME.crt >$FILENAME.pem
chmod 600 $FILENAME.key $FILENAME.pem

socat OPENSSL-LISTEN:2376,bind=x.x.x.x,fork,reuseaddr,cert=server.pem,cafile=client.crt UNIX-CLIENT:/var/run/docker.sock

** TLS with client verification only **
  TLS certificate: client.crt
  TLS Key: client.key